Behavioral task
behavioral1
Sample
NEAS.45fc4a2f2e6f792cc8c3d03552a58d80.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
NEAS.45fc4a2f2e6f792cc8c3d03552a58d80.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.45fc4a2f2e6f792cc8c3d03552a58d80.exe
-
Size
354KB
-
MD5
45fc4a2f2e6f792cc8c3d03552a58d80
-
SHA1
c48542fa8b8460f676f82f7314b2b265a68cf059
-
SHA256
3cb6ebabc4e442bbca9c22b4f64e8af4feabf2bea7c15d6e3c4e581fd9b702b5
-
SHA512
994fe9a5c0a97918d641bb784c5350069c1ec260ec2c5865921bcdb60d8e1a05f78f0c4bf3d6ea13e1a833dc1bab3b3b64aa2e64b761c49ccce233e11b0ec073
-
SSDEEP
6144:uOYITtBbSyPuLdJ+OacAVGBuL9d5xYdxfsLPrPwo:uOYYt0yPSdxac6GBYxYTfm
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NEAS.45fc4a2f2e6f792cc8c3d03552a58d80.exe
Files
-
NEAS.45fc4a2f2e6f792cc8c3d03552a58d80.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
UPX0 Size: - Virtual size: 604KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 201KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nm1/Ps Size: 512B - Virtual size: 64B
UPX1[O[ Size: 512B - Virtual size: 6B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ